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IMPROVED SECURITY SYSTEM 



Field of the Invention 

This invention relates to an improved security system and relates 
particularly to a security system which permits authorised keyless actuation of a 
5 locking system, a control system, or the like, to permit entry through or past a 
closure, such as a door, into a building, secure area or motor vehicle, or 
actuation of control circuits permitting operation of a motor vehicle or the like. 

Background of the Invention 

10 The invention will be described with particular reference to its 

application to a motor vehicle, but it will be understood that the principles of the 
invention apply to a wide range of applications. 

Many forms of security systems have been proposed for motor vehicles 
which enable an authorised person to obtain access to the vehicle without the 

15 use of a key to physically unlock the vehicle doors. Such known systems 
include the provision of radio transmitter devices which, on actuation by a push 
button, cause the vehicle to unlock. These systems require the relatively bulky 
radio transmitter to be carried by the authorised person. Other systems, 
commonly known as "passive access" systems, enable an electronic 

20 identification device carried by an authorised person to actuate the locking 
mechanism of a locked vehicle. With such a system, the vehicle transmits a 
message to the electronic identification device when the person touches the 
vehicle door handle or triggers a short range proximity sensor in the vehicle. 
Typically, the message contains vehicle identification information so that the 

25 electronic identification device can determine whether or not to respond. The 
vehicle transmission may also contain a random number. If the vehicle 
identification code is correct, the random number is manipulated by the 
electronic identification device according to an algorithm. The result of the 
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manipulation is then transmitted to the vehicle which compares the response to 
an expected response. If the transmitted response and expected response match, 
the vehicle is unlocked. 

The system may also include vehicle operation authentication whereby a 
5 similar process is repeated when the vehicle operator attempts to start the 
vehicle. 

In this instance, it is desirable for the system to be able to determine 
whether or not the identification device is inside the vehicle. Therefore, 
typically, the vehicle's signal transmission is controlled so that it is unlikely that 
10 the identification device could detect the signal from outside the vehicle. 

The known passive access system described above provides a remote 
keyless entry system which allows authorised entry to and operation of a vehicle 
by an authorised person, carrying the electronic identification device, simply 
walking up to the vehicle, opening the door and driving off. However, the 
15 system is vulnerable to an unauthorised person obtaining access to the vehicle. 
An attack on the security takes advantage of the contactless operation of the 
electronic identification device and the ability to activate that device remotely 
without the knowledge of the authorised owner. The attack works as follows: 

The authorised owner of the vehicle locks the vehicle and walks 
20 away, beyond the normal range of communication between the 

electronic identification device and the vehicle communication 

system. A person carrying a transceiver follows the operator. 

Another person carrying a second transceiver stays with the vehicle. 

The person near the vehicle triggers the vehicle to transmit its 
25 identification message, such as by touching the door handle or 

triggering a proximity sensor in the vehicle. The transceiver carried 

by that person relays the vehicle's transmission to the transceiver of 
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the second person near the authorised operator. The electronic 
identification device carried by the authorised operator receives the 
relayed vehicle transmission and responds. This response is 
received by the transceiver carried by the person near the owner and 
5 the response is relayed back to the transceiver carried by the person 

near the vehicle which transmits the identification device response 
and the vehicle, receiving a valid response, unlocks the vehicle. 
While proposals have been made to resolve the potential security 
problem, such proposals are relatively expensive and difficult to implement. 
10 One such proposal requires a further parameter to be determined, such as the 
distance between the vehicle and the electronic identification device, and the 
system is arranged so that the vehicle will only unlock if that distance is no 
greater than a predetermined maximum. While this additional proximity criteria 
is effective in most circumstances, it is a technically difficult and relatively 
15 expensive solution. 

It is therefore desirable to provide an improved passive access security 
system which obviates the difficulties of the known system. 

It is also desirable to provide an improved passive access security system 
which is relatively simple and economic to implement. 
20 It is also desirable to provide an improved passive access security system 

which is robust and immune to attack using easily available, portable equipment 
such as transceivers. 

Summary of the Invention 
25 In accordance with one aspect of the invention there is provided a 

security system having transponder means adapted to be actuated to generate 
and transmit an electromagnetic trigger signal, and a portable electronic device 
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adapted to receive and respond to said trigger signal by transmitting a response 
signal, the receipt and authentication of which by the transponder means gives 
rise to a predetermined event, said response signal comprising one or more radio 
frequency signals of a frequency and duration determined by an algorithm 
5 together with a unique stored number with reference to a random number 
contained in the trigger signal. 

In one embodiment of the security system of the invention incorporated 
into a motor vehicle, the transponder means is adapted to be actuated either by a 
proximity sensor or by a person touching the vehicle, lifting a door handle or 

10 otherwise signalling the transponder means. When an authenticated response 
signal is received by the transponder means, it causes the vehicle door or doors 
to become unlocked, in a known manner. 

The present invention seeks to avoid unauthorised defeat by varying the 
communications between the transponder means and the portable electronic 

15 device. With present passive access systems as described above, the 
communication transmissions are of fixed frequencies and in relatively narrow 
bandwidths. With the present invention, the communication signals can be 
throughout a relatively broad spectrum of frequencies, such as from 200 MHz to 
400 MHz, or even broader. With such a possible bandwidth, it is virtually 

20 impossible for a person with a transceiver or similar device to monitor, detect 
and retransmit the response signal. A person attempting to defeat the system 
would need to relay the entire 200 MHz band to an accomplice, but the wide 
bandwidth coupled with the low level of the target signal make implementation 
extremely unlikely. 

25 In one form of the invention, the use of an algorithm with a unique stored 

number to manipulate the random number contained in the trigger signal means 
that both the frequency of the response signal and the number and length of 



WO 01/23227 



# 



PCT/AU00/01186 



-5- 



transmitted pulse trains can be varied. The transponder means is able to tune its 
receiver to the frequencies of the expected response signal. 

In order that the invention is more readily understood, one embodiment 
will now be described with reference to the accompanying drawings. 



Description of the drawings 

Figure 1 is a schematic view of a vehicle incorporating a security system 
in accordance with the invention, and 

Figure 2 is a block diagram schematically illustrating the features of the 
10 invention. 

Description of the Preferred Embodiment 

Referring to the drawings, in the embodiment illustrated, a proximity 
sensor 12 is located in a vehicle 14 and senses, in a known manner, the presence 

15 of a person adjacent the vehicle 14. The proximity sensor 12 may sense a 
person touching a vehicle door handle, or sense an attempt to actuate a door 
handle which activates a switch. Alternatively, the sensor 12 may comprise a 
short range proximity sensor located in the vehicle using, for example, 
capacitive monitoring to sense the presence of a person adjacent the vehicle. 

20 When the proximity sensor 12 is activated, it causes a vehicle transponder 16 in 
the vehicle 14 to transmit a radio frequency trigger signal at a predetermined, 
fixed carrier frequency. This trigger signal includes a random number generated 
by random number generator 17 associated with the transponder 16. The trigger 
signal also incorporates coded vehicle identification information that uniquely 

25 identifies the vehicle 14. The trigger signal may be transmitted a predetermined 
number of times, or over a predetermined period, following activation of the 
proximity sensor. Alternatively, one trigger signal may be transmitted for each 
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proximity sensor activation. 

The random number generated by the generator 17 is used to establish 
one or more frequencies to which the transponder receiver 26 in the vehicle is to 
be tuned to receive a response to the transmitted trigger signal. In this 
5 embodiment, the RF frequencies may vary between 200 MHz and 400MHz, 
although it will be appreciated that a broader or different bandwidth may be 
used. 

At least one electronic identification device 18 is associated with the 
vehicle transponder 16. The device 18 has receiver and decoder circuitry 19 to 

10 receive and decode a received signal, a processor 21 and a transmitter 24. A 
unique identification number together with vehicle identification information is 
held in a store 23, and the processor is programmed to conduct calculations in 
accordance with an algorithm 22. 

If the person sensed by the proximity sensor 12 is carrying an electronic 

15 identification device 18, the device receives the trigger signal in the receiver and 
decoder circuitry 19 and determines if the transmitted coded vehicle 
identification information matches the stored vehicle information in the device. 
If the received and stored information matches, the random number included 
with the trigger signal is manipulated in processor 21 using an algorithm 22 and 

20 the stored unique number in the store 23. The processor thereby generates a 
resulting response signal that comprises one or more bursts of RF energy of 
given duration and at one or more frequencies, the three variables (number of 
pulses generated, their duration and the RF frequencies of the pulses) being 
determined by the algorithm working with the unique stored number in 

25 conjunction with the random number transmitted from the vehicle 14. The 
response signal is transmitted by the transmitter 24 and received by a receiver 
26 associated with the transponder 16 in the vehicle 14. 
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As indicated above, in generating and transmitting the trigger signal, 
which carries the random number, the receiver 26 in the vehicle is tuned to the 
frequencies of the expected response signal in accordance with the transmitted 
random number. On receipt of a response signal of the appropriate frequency or 
5 frequencies, a comparator 27 compares the response signal with the expected 
signal, it being understood that the transponder stores the unique identification 
number of the device and is able to use the same algorithm to calculate the 
expected response. If the received response signal matches the expected 
response, a signal is sent to a door lock actuator 28 to unlock the vehicle 
10 door(s). 

If vehicle operation authentication is also required of the system, the 
information exchange described above is repeated when the operator attempts to 
start the vehicle. In this instance, it is desirable for the system to determine if 
the identification device 18 is inside the vehicle 14. Accordingly, the power of 

15 the trigger signal transmitted by the transponder for this function is controlled so 
that it is unlikely that the identification device 18 could detect the signal from 
outside the vehicle. This ensures that the vehicle cannot be operated unless the 
identification device is within the vehicle. If desired, the system may be 
designed such that the identification device must be mounted in an appropriate 

20 receptacle in the vehicle before the vehicle is able to be started. 

It will be appreciated that the security system of the described 
embodiment is more secure than the previous systems of a similar type as 
described herein by reason of the use of a variable signal frequency within a 
wide bandwidth for the response signal. Further, by using an algorithm together 

25 with an unique identification number to manipulate the transmitted random 
number and generate a response signal having at least three variables, vis, the 
number of pulses, the duration of the pulses and the RF frequencies of the 
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individual pulses, it will be very difficult to attack the system by the use of 
normal, portable transceivers. 

It will be appreciated that the response signal may also include other 
variables, such as a polling identification number, the polling of which is 
5 determined by the random number. 

A security system of the invention may be made substantially more 
immune to interfering external RF sources than currently known systems by the 
use of the variable frequency of the response signal. If access to a vehicle is 
blocked because of an interfering RF signal source, re-activation of the trigger 
10 signal will generally give rise to a response signal having a frequency that is not 
interfered with by the RF source. However, some redundancy should be made in 
the identification device's response coding to allow for masking which may 
occur due to interfering external signals at spot frequencies. 

It will be appreciated that the principals of this invention may be used in 
15 a large number of different applications, such as security access associated with 
buildings, including external doors, internal doors, lifts, maintenance areas and 
the like. The principals may also be used to provide authorisation for activities 
other than access. Thus, the system may be designed to permit only authorised 
use of equipment 
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CLAIMS: 



1. A security system having transponder means adapted to be actuated to 
generate and transmit an electromagnetic trigger signal, and a portable 

5 electronic device adapted to receive and respond to said trigger signal by 
transmitting a response signal, the receipt and authentication of which by the 
transponder means gives rise to a predetermined event, said response signal 
comprising one or more radio frequency signals of a frequency and duration 
determined by an algorithm together with a unique number stored in the device 

10 and with reference to a random number contained in the trigger signal. 

2. A security system according to claim 1 wherein said response signal 
contains three variables comprising the number of pluses in the RF signal, the 
frequency of the pulses and the pulse duration. 



3. A security system according to claim 1 or claim 2 wherein the 
transponder means includes a receiver which is tuned to the expected frequency 
of the response signal in accordance with the random number contained in the 
trigger signal. 



4. A security system according to any one of claims 1 to 3 wherein the 
transponder means is actuated by a proximity sensor. 

5. A security system according to any one of claims 1 to 3 wherein the 
25 transponder means is actuated by a switch. 



15 



20 



6. 



A security system according to any one of the preceding claims wherein 
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the predetermined event is the actuation of a door lock or the enabling of a 
control system. 

7. A security system according to any one of the preceding claims wherein 
5 a random number generator is associated with the transponder means and 

generates a new random number upon each actuation of the transponder means. 

8. A security system according to any one of the preceding claims wherein 
the transponder means transmits the trigger signal for a predetermined period 

10 following actuation or until reception of an authenticated response signal. 

9. A security system according to any one of the preceding claims wherein 
said trigger signal incorporates coded identification information that uniquely 
identifies the transponder 

15 

10. A security system according to claim 9 wherein the device stores 
identification information and on reception of a trigger signal, determines if the 
transmitted coded identification information match the stored information and 
generates a response signal only if the information matches. 

20 

11. A security system according to any one of the preceding claims wherein 
the frequency of the response signal varies with each transmission within the 
range 200 MHz and 400 MHz. 

25 12. A security system according to any one of the preceding claims wherein 
the frequency of individual pulses of the response signal vary within a 
predetermined range. 



r 
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13. A security system according to any one of the preceding claims wherein 
said transponder means is mounted in a motor vehicle and is actuated by a 
proximity sensor or a switch associated with a vehicle door handle. 

5 

14. A security system according to claim 13 wherein the or a second 
transponder means is associated with vehicle electrical circuits which are 
enabled on receipt of an authenticated response signal following transmission of 
a coded trigger signal initiated by vehicle starting procedures. 

10 

15. A security system according to claim 14 wherein the signal strength of 
the coded trigger signal transmitted on actuation of vehicle starting procedures 
is such that the signal is unable to be detected by the device outside the vehicle. 

15 16. A security system according to any one of claims 13 to 15 wherein the 
vehicle includes a receptacle with which the device must be engaged before 
vehicle electrical systems are able to be enabled. 

17. A security system substantially as hereinbefore described with reference 
20 to the accompanying drawings. 
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[ furnished subsequently to this Authority in computer readable form. 

[ | The statement that the subsequently furnished written sequence listing does not go beyond the disclosure in the 

international application as filed has been furnished. 
| | The statement that the information recorded in computer readable form is identical to the written sequence listing has 

been furnished 

4. The amendments have resulted in the cancellation of: 

[ "I the description, pages 

j ~j the claims, Nos. 

| | the drawings, sheets/fig. 

5. [^] This report has been established as if (some of) the amendments had not been made, since they have been considered to 

go beyond the dis closure as filed, as indicated in the Supplemental Box (Rule 70.2(c)).** 

* Replacement sheets which have been furnished to the receiving Office in response to an invitation under Article J 4 are referred to in this 
report as "originally filed" and are not annexed to this report since they do not contain amendments (Rules 70.16 and 70. 1 7). 

** Any replacement sheet containing such amendments must be referred to under item I and annexed to this report 
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V. Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial applicability; citations 



and explanations supporting such statement 

1. Statement 

Novelty (N) Claims 1 to 17 YES 

Claims NO 

Inventive step (IS) Claims 1 to 17 YES 

Claims NO 

Industrial applicability (IA) Claims 1 to 17 YES 

Claims NO 

2. Citations and explanations (Rule 70.7) 



EP-0926021-A2 (ROVER GROUP LIMITED) 30 June 1999 
US-5889471-A (GLEHR et al.) 30 March 1999 
US-5790014-A (CAMPBELL et al.) 4 August 1998 
DE-19637387-C1 (SIEMENS AG) 29 January 1998 
FR-2717327-A1 (VALEO ELECTRONIQUE) 15 September 1995 
US-4738334-A (WEISHAUPT) 19 April 1988 

All of the cited documents relate to transponder actuated security systems, and in particular security systems in 
which there is some degree of control over the frequency that is selected for communication between a 
transmitter and a receiver. None of the cited documents teaches or suggests the invention as defined in claim 1 
wherein there is provided a "response signal comprising one or more radio frequency signals of a frequency 
and duration determined by an algorithm together with a unique number stored in the device and with 
reference to a random number contained in the trigger signal." These features contribute to the security of the 
system and therefor claim 1 is novel and involves an inventive step over the cited prior art documents. 
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